Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235322e302f32342d3234203d3e20313336373837.roa
File: 322e35362e3235322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: GeuBJerIfpZd+XiBtqxsBkXXJobDnBgLu2V9jR/EDBQ=
Subject key identifier: A0:B6:2D:31:89:A7:16:F3:BA:3E:2F:85:5F:93:35:94:43:AD:CD:22
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6F1ECC02449F5B4EEDADECA6F0C325BE8D565DE0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235322e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 30 Nov 2023 14:02:19 +0000
ROA not before: Thu 30 Nov 2023 13:57:19 +0000
ROA not after: Thu 28 Nov 2024 14:02:19 +0000
asID: 136787
IP address blocks: 2.56.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:1e:cc:02:44:9f:5b:4e:ed:ad:ec:a6:f0:c3:25:be:8d:56:5d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 30 13:57:19 2023 GMT
Not After : Nov 28 14:02:19 2024 GMT
Subject: CN=A0B62D3189A716F3BA3E2F855F93359443ADCD22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:c5:f2:43:90:0e:60:b9:2e:2b:b3:7f:6d:
b8:24:da:fa:2e:2e:bf:3f:c9:b0:ba:58:0f:12:66:
e7:2a:7d:74:30:e6:eb:dc:ff:b7:d3:cf:24:16:d2:
df:e4:9d:02:28:74:03:ad:a9:3e:bf:99:d4:01:39:
0b:dc:97:c0:16:62:a7:c3:23:49:d9:f5:81:c7:ac:
59:ce:f5:b1:54:a4:51:b4:bb:3a:8a:d8:ce:78:ec:
e7:e8:9c:7d:d0:04:bb:08:42:51:de:94:05:24:0f:
2d:43:8d:67:e6:4b:fc:f4:1a:8b:e1:15:3a:6c:20:
91:37:15:4e:8d:3a:57:9d:09:11:17:4e:eb:c6:2b:
14:6e:78:f7:89:31:d8:07:43:e1:fe:93:57:f5:6c:
6e:8b:bc:c4:b6:18:f0:78:ba:8a:ab:14:cf:f5:36:
42:a8:07:f2:da:e3:29:37:86:a0:75:c9:1c:87:37:
5b:19:64:e9:35:9b:93:13:ec:e1:02:5e:44:5f:6d:
58:dc:98:2d:b0:d9:80:3e:73:df:96:58:9d:1e:5e:
96:94:ea:7f:0f:1d:6d:32:7c:88:0d:d8:b7:b9:bf:
7d:74:0b:09:1a:af:e5:46:76:07:96:0a:62:35:b8:
7d:ab:bd:ae:d4:ff:2f:8d:c1:68:db:f6:99:df:b1:
69:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B6:2D:31:89:A7:16:F3:BA:3E:2F:85:5F:93:35:94:43:AD:CD:22
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.252.0/24
Signature Algorithm: sha256WithRSAEncryption
18:17:71:8c:f8:98:e3:d6:86:f4:a3:a3:a9:26:c2:96:47:24:
46:a2:5b:92:52:9f:70:f1:a5:bb:f0:27:8b:f9:5d:b5:d3:35:
e1:b0:08:29:df:b4:6d:9f:40:28:53:10:a7:0c:0f:61:a9:a3:
46:7e:78:27:a5:ec:11:0e:0c:2a:3e:34:07:19:43:5f:c8:03:
62:16:7d:77:94:37:0c:f3:97:f5:48:ee:32:35:2d:94:06:55:
d7:8e:0c:4d:e6:03:c2:e9:0b:8d:90:64:be:f4:6b:62:09:a0:
9d:1b:94:95:b2:35:07:a4:fa:7b:77:2c:bb:bd:d8:a6:2d:7c:
e3:73:4e:de:3d:c9:dc:2a:84:8a:92:47:96:9c:53:bb:ce:d1:
32:7d:9e:61:7b:cd:b1:b1:50:e5:39:81:70:79:29:ed:95:34:
a1:ea:8b:8a:d9:75:ce:e4:91:17:31:b7:27:33:f3:56:8e:e6:
8b:4f:f9:96:f0:50:a7:2c:58:26:27:37:b6:88:1f:b8:2e:12:
1b:e1:b3:ae:22:69:22:69:c8:a5:ab:18:10:41:fe:d6:43:8e:
cf:06:9a:de:60:17:b4:7e:d0:60:13:b2:b2:47:1c:5c:8d:74:
21:f4:f8:6a:53:8c:3b:81:0b:55:a3:31:e3:13:ba:ae:4b:71:
c6:53:d5:ab
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUbx7MAkSfW07treym8MMlvo1WXeAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzExMzAxMzU3MTlaFw0yNDExMjgxNDAyMTlaMDMxMTAvBgNV
BAMTKEEwQjYyRDMxODlBNzE2RjNCQTNFMkY4NTVGOTMzNTk0NDNBRENEMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/z8XyQ5AOYLkuK7N/bbgk2vou
Lr8/ybC6WA8SZucqfXQw5uvc/7fTzyQW0t/knQIodAOtqT6/mdQBOQvcl8AWYqfD
I0nZ9YHHrFnO9bFUpFG0uzqK2M547OfonH3QBLsIQlHelAUkDy1DjWfmS/z0Govh
FTpsIJE3FU6NOledCREXTuvGKxRuePeJMdgHQ+H+k1f1bG6LvMS2GPB4uoqrFM/1
NkKoB/La4yk3hqB1yRyHN1sZZOk1m5MT7OECXkRfbVjcmC2w2YA+c9+WWJ0eXpaU
6n8PHW0yfIgN2Le5v310Cwkar+VGdgeWCmI1uH2rva7U/y+NwWjb9pnfsWmjAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUoLYtMYmnFvO6Pi+FX5M1lEOtzSIwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIyZTM1MzYyZTMyMzUzMjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAI4
/DANBgkqhkiG9w0BAQsFAAOCAQEAGBdxjPiY49aG9KOjqSbClkckRqJbklKfcPGl
u/Ani/ldtdM14bAIKd+0bZ9AKFMQpwwPYamjRn54J6XsEQ4MKj40BxlDX8gDYhZ9
d5Q3DPOX9UjuMjUtlAZV144MTeYDwukLjZBkvvRrYgmgnRuUlbI1B6T6e3csu73Y
pi1843NO3j3J3CqEipJHlpxTu87RMn2eYXvNsbFQ5TmBcHkp7ZU0oeqLitl1zuSR
FzG3JzPzVo7mi0/5lvBQpyxYJic3togfuC4SG+GzriJpImnIpasYEEH+1kOOzwaa
3mAXtH7QYBOyskccXI10IfT4alOMO4ELVaMx4xO6rktxxlPVqw==
-----END CERTIFICATE-----
Generated at Wed May 8 11:32:59 2024 by rpki-client on console-ams.rpki-client.org